$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa File: 243cb8c9-f327-32cd-ae01-b4a75520d28d.roa (raw, json) Hash identifier: H/sxZRhw44xYzCdRf3bINOrbuWd50KjLY68ypPGkT8s= Subject key identifier: BA:F4:DC:FF:64:72:F7:47:B1:87:C2:27:BA:40:B9:A8:93:E7:5F:7E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF2AD25C44399D78B005B8 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 209.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2a:d2:5c:44:39:9d:78:b0:05:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=40e990b5-6746-45a9-92de-cf244979903e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:a8:e8:4d:f8:38:60:58:7b:13:fb:0b:5a: 29:e4:5f:1a:fc:a9:5d:91:be:f0:e7:18:e0:01:80: 18:67:89:d9:d0:c1:eb:f2:6b:c5:f1:40:56:07:86: 8a:a0:29:a7:0a:61:43:28:5d:69:a1:83:b5:49:a4: 8a:7c:b3:9f:d0:00:e3:41:e0:2d:34:e3:b1:6c:6b: f6:51:4a:7b:6f:e3:17:ce:fe:4d:73:bf:95:c5:b7: a8:ac:3d:e2:3f:08:18:d8:73:fc:04:cf:e5:cb:36: 50:f5:c8:a1:ac:04:26:7b:4b:5c:53:2d:f0:12:78: 5d:6a:52:81:22:bb:66:99:4b:52:0f:df:31:51:c7: c0:7b:c7:43:07:b3:29:a4:08:39:53:e8:e6:62:20: 42:e9:6e:61:e7:ce:95:92:85:73:d4:c2:f4:c9:a2: c0:9c:e1:f7:4e:28:f7:41:e0:4d:98:a2:bc:e5:a3: 1d:45:73:35:25:8d:cb:74:60:74:b1:e0:39:70:42: 9e:78:af:a1:29:e8:a6:55:83:95:c5:bc:03:52:ee: a5:1a:ec:8d:e1:fb:18:9c:39:43:58:c2:d4:c3:ac: ef:b2:4a:7f:fa:38:41:ce:2c:1a:af:16:ed:f4:9a: a1:b5:f8:1c:44:5b:41:79:a1:27:33:c9:92:69:c3: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F4:DC:FF:64:72:F7:47:B1:87:C2:27:BA:40:B9:A8:93:E7:5F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a1:5e:b8:82:a1:43:00:e3:1b:a2:14:ef:56:dc:ac:f6:e3: 77:fd:c1:35:31:20:a1:7c:28:11:b3:db:de:27:34:49:f7:5a: c7:a6:31:ee:3b:cf:bd:7c:91:5c:0f:af:a7:4f:99:c3:09:27: 3c:ff:b4:67:4c:07:54:55:6a:2f:ca:ec:dc:74:3f:0b:2b:0f: 9b:5c:cd:f0:ef:35:7f:7d:fd:12:41:70:a9:20:33:3b:55:ee: af:24:34:07:d0:23:9a:88:59:24:64:5c:e2:0c:5f:4c:98:9f: af:0c:96:ce:59:05:0e:9e:50:0e:83:d5:9f:0f:ba:e3:15:75: 8e:89:48:9f:3f:53:4e:b2:4a:cb:ee:8b:fa:c3:55:64:8b:f1: f7:b9:27:81:2d:a7:14:9c:a3:98:8b:95:19:fa:97:c7:73:e7: 88:bb:3a:49:d5:01:14:13:95:82:44:80:ce:37:cb:70:35:85: 35:43:23:82:8c:05:0f:60:b3:51:b6:66:c2:f0:08:a5:b5:34: 0e:1e:58:f6:1a:8b:85:72:94:ea:ff:fd:c4:73:04:4a:b9:5b: 51:db:02:6c:47:33:72:d3:38:af:0c:f9:31:78:52:23:63:2d: 3a:88:55:06:cc:2a:6a:bf:b7:fb:29:31:f6:81:1c:df:0d:3f: 48:22:bc:22 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmdvyrSXEQ5nXiwBbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NDBlOTkwYjUtNjc0Ni00NWE5LTkyZGUtY2YyNDQ5Nzk5MDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyGo6E34OGBYexP7C1op5F8a/Kldkb7w5xjg AYAYZ4nZ0MHr8mvF8UBWB4aKoCmnCmFDKF1poYO1SaSKfLOf0ADjQeAtNOOxbGv2 UUp7b+MXzv5Nc7+VxbeorD3iPwgY2HP8BM/lyzZQ9cihrAQme0tcUy3wEnhdalKB IrtmmUtSD98xUcfAe8dDB7MppAg5U+jmYiBC6W5h586VkoVz1ML0yaLAnOH3Tij3 QeBNmKK85aMdRXM1JY3LdGB0seA5cEKeeK+hKeimVYOVxbwDUu6lGuyN4fsYnDlD WMLUw6zvskp/+jhBziwarxbt9JqhtfgcRFtBeaEnM8mSacMbTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLr03P9kcvdHsYfCJ7pAuaiT519+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjQzY2I4YzktZjMyNy0z MmNkLWFlMDEtYjRhNzU1MjBkMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0VkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAh6FeuIKhQwDjG6IU71bcrPbjd/3BNTEgoXwoEbPb3ic0Sfdax6Yx7jvP vXyRXA+vp0+ZwwknPP+0Z0wHVFVqL8rs3HQ/CysPm1zN8O81f339EkFwqSAzO1Xu ryQ0B9AjmohZJGRc4gxfTJifrwyWzlkFDp5QDoPVnw+64xV1jolInz9TTrJKy+6L +sNVZIvx97kngS2nFJyjmIuVGfqXx3PniLs6SdUBFBOVgkSAzjfLcDWFNUMjgowF D2CzUbZmwvAIpbU0Dh5Y9hqLhXKU6v/9xHMESrlbUdsCbEczctM4rwz5MXhSI2Mt OohVBswqar+3+ykx9oEc3w0/SCK8Ig== -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:23 2025 by rpki-client